Forum Discussion

Tythadius's avatar
Tythadius
Copper Contributor
Jul 10, 2022

Azure workbook for cybersecurity patrol

Hello I was wondering if anyone had any queries that would help for a patrol that I am creating? Basically what I am using it for is a workbook for my company to have a quick glance at certain IOC's ...
azure
KQL
Log Data
threat hunting
Workbooks
Clive_Watson's avatar
Clive_Watson
Bronze Contributor
Jul 11, 2022

Tythadius

 

Maybe start with these 3 workbooks  + Azure Activity

 

 Also look at Investigation Insights, which has an IOC lookup (toggle "entity")

 





  • Tythadius's avatar
    Tythadius
    Copper Contributor
    Jul 29, 2022
    Clive_Watson

    Thank you so much. I will definitely use this in the future.

Resources